avedos IT-Rating Software nach Basel II Richtlinen

Why IT Risk Management?

There are 2 causal reasons for managing IT risk:

• A great number of businesses show an intense dependence on IT systems in their value chain
• Regulatory institutions define standards and thus push the necessity to manage IT risks. Examples for this are Basel II, Corporate Governance/IT Governance or Sarbanes-Oxley

Internal demand on IT Risk Management

A criterion of a business with modern and firmly organised processes is the degree of integration of Information Technology into the business processes. Information Technology is one of the most important enablers of core processes in an increasing number of businesses. Consequently and inevitably IT gains direct influence on the value chain of a company, which leads to a high risk of damage in the case of negative occurrences.

Another side effect of the increased dependence of core processes and IT is the larger share of IT expenses in the total cost of a business. This also increases the potential loss, which does not cause direct disruptions of core processes, yet results in additional expenses for the recovery of IT components.

External demand on IT Risk Management

Over the past years several guidelines for active management have been developed, which also concern IT. These guidelines will advance particularly in relation to the demands on Risk Management methods and thus require reinforced activities to measure, evaluate, and manage IT risks.

• Basel II guidelines for operational risk
• Corporate Governance / IT Governance
• Sarbanes Oxley Pact (SOX)